Privacy Policy

We process account details such as your name, email address, login identifiers, subscription status, study progress, saved notes, bookmarks, support messages, and technical information needed to secure and operate the service.

Payment-card details are collected by Stripe and are not stored by DrNote. AI questions and relevant study context are sent to the AI provider only when you use an AI feature. Do not submit patient data, protected health information, or other unnecessary sensitive data.

Information is used to authenticate users, provide study content, enforce plan limits, process subscriptions, prevent abuse, send service messages, troubleshoot errors, and improve DrNote.

DrNote relies on service providers including Clerk for authentication, Stripe for billing, Cloudflare for hosting and data services, Resend for transactional email, and an AI provider for requested AI responses. Those providers process information under their own terms and privacy commitments.

Essential cookies and browser storage keep you signed in and remember service settings. Optional analytics are enabled only when configured for the deployment. Applicable consent controls must be presented before enabling optional analytics where required by law.

We retain information only as reasonably necessary to provide the service, meet legal obligations, resolve disputes, and protect the platform. We use access controls and encrypted transport, but no online service can guarantee absolute security. Providers may process information in countries other than your own.

You can update account details through your profile and cancel a paid subscription through the billing portal. Depending on your location, you may have rights to access, correct, delete, restrict, or export personal information. Send requests to hello@drnote.app; identity verification may be required.

Privacy questions and requests can be sent to hello@drnote.app. This policy will be updated when practices or legal requirements change.